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DETAILED ACTION 

This office action is in further response to request for reconsideration filed on June 18, 2008. Original 
application contains claim 1-57. Applicant previously amended claims 1, 3, 7, 11, 13, 16-18, 31, 34, 36-37, 40- 
41, 49-51, 54, and 57. Therefore, presently Claims 1-57 are pending for further consideration. 



Response to Arguments 

Applicant's arguments with respect to claims 1-57 have been considered but are moot in view of the 
new ground(s) of rejection. 

Claim Rejections - 35 USC § 112 
The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the subject 
matter which the applicant regards as his invention. 

Claims 1-57 rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite for failing to 
particularly point out and distinctly claim the subject matter which applicant regards as the invention. 

Claim 7, and 13: This is not clear what does "encrypting a quantity" means when obtaining a 

forth value. 

Claim 12 limitation 1, and 2: This is not clear what does "decrypting a first value", and "a 
primary computer system" means in the claim language. 
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Claims 4, 8, and 13 recites the limitation "a first hash function". There is insufficient antecedent 
basis for this limitation in the claim. 

Claim 14, recites the limitation "a first hash function", " a second hash function", and " a third 
hash function", and "a fourth hash function". There is insufficient antecedent basis for this limitation in the 
claim. 

Claim 15 recites the limitation "a first cryptographic cipher". There is insufficient antecedent 
basis for this limitation in the claim. 



Claim Rejections - 35 USC § 103 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness rejections set forth 
in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 of this title, 
if the differences between the subject matter sought 1o be patented and the prior art are such that the subject matter as a whole would 
have been obvious at the time the invention was made to a person having ordinary skill in the art to which said subject matter 
pertains. Patentability shall not be negatived by the manner in which the invention was made. 



Claims 1-57 are rejected under 35 U.S.C. 103(a) as being unpatentable over Nguyen (U. S. 
Patent 5,689,566) and further in view of Shambroom (U. S. Patent 5,923,756). 



1 . Regarding Claim 1 Nguyen teaches a computer implemented method for updating a 

Current security scheme on a computer system, said computer implemented method comprising the steps of: (a) 

receiving log-in data for a client during a first log-in attempt; (b) authenticating said client, wherein said step (b) 
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includes the steps of: (1) applying a first function to a value in said log-in data to obtain a first result, and (2) 
employing said first result in determining whether to authenticate said chent during said first log-in attempt; (c) 
completing said first log-in attempt; (d) automatically determining that said current security scheme is to be 
replaced by a desired security scheme after completing said first log-in attempt, wherein said determining is 
performed before a next log-in attempt for said client; and (e) modifying at least one record in said computer 
system in response to said step (d) before said next log-in attempt, wherein said step (e) includes the step of: (1) 
applying a second function to said value received in said step (a) to obtain a second result (Fig. 1-2, col.3 line 33 
to col.4 line 40). 

Although the system disclosed by Nguyen shows all the features of the claimed limitation, but Nguyen does not 
specifically disclose automatically controlling security during the log-in attempts. 

In an analogous art, Shambroom, on the other hand discloses computing environment that relates to methods 
and apparatus for providing remote client access wherein automatically determining that said current security 

scheme is to be replaced by a desired security scheme after completing said first log-in attempt, wherein said 
determining is performed before a next log-in attempt for said client; and (e) modifying at least one record in 
said computer system in response to said step (d) before said next log-in attempt, wherein said step (e) (col.9 
lone 65 to col. 12 line 25). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of invention to combine the 
teachings of Nguyen and Shambroom, because Shambroom' s method of for increasing security of transactions 
involving a client, a network server, and a managed host, where the increased security is attained by using 
security policies for communications between the client and the network server, would not only promote 
security structure in the system of Nguyen during receiving data from host computing devices but will also 
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provide safeguards against attempt by unauthorized person to breach security of system. 

2. Regarding Claim 1 8 Nguyen teaches a computer implemented method for providing a client with access 
to a primary system through an intermediate system, said computer implemented method comprising the steps 
of: (a) creating a log-in record at said intermediate system, wherein said log-in record includes a security 
identifier and a first encrypted value, wherein said security identifier corresponds to a current security scheme 
employed by said intermediate system; (b) receiving log-in data for said client; (c) authenticating access of said 
client to said intermediate system, based on data from said log-in data and data from said log-in record; (d) 
obtaining authentication data to send to said primary system, wherein said authentication data includes data 
from a decrypted version of said first encrypted value at said intermediate system; (e) determining that said 
current security scheme is to be replaced by a desired security scheme; and (f) modifying said log-in record, 
wherein said step (f) includes the steps of: (1) updating said security identifier to correspond to said desired 
security scheme, (2) employing data in said log-in data received in said step (b) to calculate a second encrj^ted 
value, and (3) replacing said first encrypted value with said second encrypted value (Fig. 1-2, col.3 line 33 to 
col.4 line 40. and col.5 line 33 to line 65). 

Although the system disclosed by Nguyen shows all the features of the claimed limitation, but Nguyen does not 

specifically disclose automatically controlling security during the log-in attempts. 

In an analogous art, Shambroom, on the other hand discloses computing environment that relates to methods 
and apparatus for providing remote client access wherein automatically determining that said current security 
scheme is to be replaced by a desired security scheme after completing said first log-in attempt, wherein said 
determining is performed before a next log-in attempt for said client; and (e) modifying at least one record in 
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said computer system in response to said step (d) before said next log-in attempt, wherein said step (e) (col. 9 
lone 65 to col. 12 line 25). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of invention to combine the 
teachings of Nguyen and Shambroom, because Shambroom's method of for increasing security of transactions 
involving a client, a network server, and a managed host, where the increased security is attained by using 
security policies for communications between the client and the network server, would not only promote 
security structure in the system of Nguyen during receiving data from host computing devices but will also 
provide safeguards against attempt by unauthorized person to breach security of system. 

3 . Regarding Claim 3 1 Nguyen teaches a processor readable storage medium having processor readable 
code embodied on said processor readable storage medium, said processor readable code for progranmiing a 
processor to perform a method for updating a current security scheme on a computer system, said method 
comprising the steps of: (a) receiving log-in data for a client during a first log-in attempt; (b) authenticating said 
client, wherein said step (b) includes the steps of: (1) applying a first fiinction to a value in said log-in data to 
obtain a first result, and (2) employing said first result in determining whether to authenticate said client during 
said first log-in attempt; (c) completing said first log-in attempt; (d) automatically determining that said current 
security scheme is to be replaced by a desired security scheme after completing said first log-in attempt, 
wherein said determining is performed before a next log-in attempt for said client; and (e) modifying at least 
one record in said computer system in response to said step (d) before said next log-in attempt, wherein said 
step (e) includes the step of (1) applying a second fimction to said value received in said step (a) to obtain a 
second result (Fig. 1-2, col.3 line 33 to col.4 line 40. and col.5 line 33 to line 65). 
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Although the system disclosed by Nguyen shows all the features of the claimed limitation, but Nguyen does not 
specifically disclose automatically controlling security during the log-in attempts. 

In an analogous art, Shambroom, on the other hand discloses computing environment that relates to methods 
and apparatus for providing remote client access wherein automatically determining that said current security 
scheme is to be replaced by a desired security scheme after completing said first log-in attempt, wherein said 
determining is performed before a next log-in attempt for said client; and (e) modifying at least one record in 
said computer system in response to said step (d) before said next log-in attempt, wherein said step (e) (col.9 
lone 65tocol.l21ine25). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of invention to combine the 
teachings of Nguyen and Shambroom, because Shambroom' s method of for increasing security of transactions 
involving a client, a network server, and a managed host, where the increased security is attained by using 
security policies for conmiunications between the client and the network server, would not only promote 
security structure in the system of Nguyen during receiving data from host computing devices but will also 
provide safeguards against attempt by unauthorized person to breach security of system. 

4. Regarding Claim 41 Nguyen teaches a processor readable storage medium having processor readable 
code embodied on said processor readable storage medium, said processor readable code for programming a 
processor to perform a method for providing a client with access to a primary system through an intermediate 
system, said method comprising the steps of: (a) creating a log-in record at said intermediate system, wherein 
said log-in record includes a security identifier and a first encrypted value, wherein said security identifier 
corresponds to a current security scheme employed by said intermediate system; (b) receiving log-in data for 



Application/Control Number: 1 0/003 ,027 Page 8 

Art Unit: 2131 

said client; (c) authenticating access of said client to said intermediate system, based on data from said log-in 
data and data from said log-in record; (d) obtaining authentication data to send to said primary system, wherein 
said authentication data includes data from a decrypted version of said first encrypted value at said intermediate 
system; (e) determining that said current security scheme is to be replaced by a desired security scheme; and (f) 
modifying said log-in record, wherein said step (f) includes the steps of: (1) updating said security identifier to 
correspond to said desired security scheme, (2) employing data in said log-in data received in said step (b) to 
calculate a second encrypted value, and (3) replacing said first encrypted value with said second encrypted 
value (Fig.1-2, col.3 line 33 to col.4 line 40. and col.5 line 33 to line 65). 

AUhough the system disclosed by Nguyen shows all the features of the claimed limitation, but Nguyen does not 
specifically disclose automatically controlling security during the log-in attempts. 

In an analogous art, Shambroom, on the other hand discloses computing environment that relates to methods 
and apparatus for providing remote client access wherein automatically determining that said current security 

scheme is to be replaced by a desired security scheme after completing said first log-in attempt, wherein said 
determining is performed before a next log-in attempt for said client; and (e) modifying at least one record in 
said computer system in response to said step (d) before said next log-in attempt, wherein said step (e) (col.9 
lone 65 to col. 12 line 25). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of invention to combine the 
teachings of Nguyen and Shambroom, because Shambroom' s method of for increasing security of transactions 
involving a client, a network server, and a managed host, where the increased security is attained by using 
security policies for communications between the client and the network server, would not only promote 
security structure in the system of Nguyen during receiving data from host computing devices but will also 



Application/Control Number: 10/003,027 

Art Unit: 2131 



Page 9 



provide safeguards against attempt by unauthorized person to breach security of system. 

5 . Regarding Claim 49 Nguyen teaches an apparatus providing a client with access to a primary system 
through an intermediate system, said apparatus comprising: a processor; and a processor readable storage 
medium, in communication with said processor, said processor readable storage medium storing code for 
programming said processor to perform a method for updating a current security scheme on a computer system, 
wherein said method includes the steps of: (a) receiving log-in data for a client during a first log-in attempt; (b) 
authenticating said client, wherein said step (b) includes the steps of: (1) applying a first function to a value in 
said log-in data to obtain a first resuU, and (2) employing said first result in determining whether to authenticate 
said client during said first log-in attempt; (c) completing said first log-in attempt; (d) automatically 
determining that said current security scheme is to be replaced by a desired security scheme after completing 
said first log-in attempt, wherein said determining is performed before a next log-in attempt for said client; and 
(e) modifying at least one record in said computer system in response to said step (d), wherein said step (e) 
includes the step of: (1) applying a second fiinction to said value received in said step (a) to obtain a second 
result (Fig. 1-2, col.3 line 33 to col.4 line 40. and col.5 line 33 to line 65). 

Although the system disclosed by Nguyen shows all the features of the claimed limitation, but Nguyen does not 
specifically disclose automatically controlling security during the log-in attempts. 

In an analogous art, Shambroom, on the other hand discloses computing environment that relates to methods 
and apparatus for providing remote client access wherein automatically determining that said current security 
scheme is to be replaced by a desired security scheme after completing said first log-in attempt, wherein said 
determining is performed before a next log-in attempt for said client; and (e) modifying at least one record in 
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said computer system in response to said step (d) before said next log-in attempt, wherein said step (e) (col. 9 
lone 65 to col. 12 line 25). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of invention to combine the 
teachings of Nguyen and Shambroom, because Shambroom's method of for increasing security of transactions 
involving a client, a network server, and a managed host, where the increased security is attained by using 
security policies for communications between the client and the network server, would not only promote 
security structure in the system of Nguyen during receiving data from host computing devices but will also 
provide safeguards against attempt by unauthorized person to breach security of system. 

6. Claims 2-17, 19-30, 32-40, 42-48, and 50-57 are rejected applied as above rejecting 

claims 1, 18, 31, 41, and 49. Furthermore, the system of Nguyen and Shambroom teaches and describes: 

As per Claim 2, wherein said computer system maintains a log-in record, wherein said step 
(b)(2) includes the steps of: (i) comparing said first result obtained in said step (b)(1) to a first 
value stored in said log-in record (col.3 line 55 to line 57). 

As per Claim 3, wherein said step (e) includes the step of: (2) 

replacing said first value in said log-in record with said second result obtained in said step (e)(1) (col.3 line 55 
to col.4 line 17). 

As per Claim 4, wherein said first fiinction is a first hash fimction and said second fiinction is a second hash 
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function different than said first hash function (col.31ine 63 to col.4 line 18). 

As per Claim 5, said step (b) includes the steps of: (3) applying a third function to said value in said log-in data 
to obtain a first credential; and (4) decrypting a third value in said log-in record to obtain a decrypted value, 
wherein said step (b)(4) employs said first credential (col.4 line 5 to line 30). 

As per Claim 6, wherein said step (b) further includes the step of: (5) forwarding said decrypted value to a 
primary computer system credential (col.4 line 5 to line 30). 

As per Claim 7, wherein said step (e) includes the steps of: (2) replacing said first value in said log-in record 
with said second result obtained in said step (e)(1); (3) applying a fourth fimction to said value in said log-in 
record to obtain a second credential; (4) encrypting a quantity to obtain a fourth value, wherein said step (e)(4) 
employs said second credential; and (5) replacing said third value in said log-in record with said fourth value 
(col. 4 line 41 to col.5 line 33). 

As per Claim 8, wherein said first fimction is a first hash fimction and said second function is a second hash 

function different than said first hash function, and said third function is a third hash function and said fourth 
function is a fourth hash fimction different than said third hash fimction (col.3 line 63 to col.4 line 30). 

As per Claim 9, wherein said step (b) includes the steps of: (3) inputting said value in said log-in data into a first 
cryptographic cipher to obtain a first encryption key; and (4) decrypting a third value in said log-in record to 
obtain a decrypted value, wherein said step (b)(4) employs said first encryption key (col.4 line 41 to line 50). 
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As per Claim 10, wherein said step (b) further includes the step of: (5) forwarding said decrypted value to a 
primary computer system (col.4 line 41 to line 65). 

As per Claim 11, wherein said step (e) includes the steps of: (2) replacing said first value in said log-in record 
with said second resuh obtained in said step (e)(1); (3) inputting said value in said log-in data into a second 
cr3q)tographic cipher to obtain a second encryption key; (4) encrypting a quantity to obtain a fourth value, 
wherein said step (e)(4) employs said second encryption key; and (5) replacing said third value in said log-in 
record with said fourth value (col.4 line 41 to col.5 line 33). 

As per Claim 12, wherein said computer system maintains a log-in record, wherein said step (b)(2) includes the 
steps of: (i) decrypting a first value in said log-in record to obtain a decrypted value, wherein said step (b)(2)(i) 
employs said first result as a decryption key; and (ii) forwarding said decrypted value to a primary computer 
system (col.4 line 50 to line 65). 

As per Claim 13, wherein said step (d) includes the steps of: (2) encrypting a quantity to obtain a second value, 
wherein said step (e)(3) employs said second result obtained in said step (e)(1); and (3) replacing said first value 
in said log-in record with said second value (col.5 line 7 to line 33). 

As per Claim 14, wherein: said first fimction is a first hash fimction and said second function is a second hash 
function different than said first hash function, and said third fimction is a third hash function and said fourth 
function is a fourth hash fimction different than said third hash function (col.31ine 63 to col.4 line 18). 
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As per Claim 15, wherein: said first function is a first cryptographic cipher and said second function is a second 
cr3q)tographic cipher different than said first cryptographic cipher, and said third fimction is a third 
cryptographic cipher and said fourth function is a fourth cryptographic cipher different than said third 
cr3q)tographic cipher (col.3 line 63 to col.4 line 40). 

As per Claim 16, further including the steps of (f) receiving log-in data for said client during a second log-in 
attempt; (g) authenticating said client during said second log-in attempt, wherein said step (g) includes the steps 

of: (1) applying said second function to a value in said log-in data received in said step (f) to obtain a third 
result, and (2) employing said third result in determining whether to authenticate said client during said second 
log-in attempt (col.3 line 40 to col.4 line 65). 

As per Claim 17, wherein said computer system includes a log-in record corresponding to said client, wherein 
said log-in record includes a first entry identifying said current security scheme, said computer implemented 
method further including the step of (h) replacing said first entry in said log-in record with a second entry 
identifying said desired security scheme (col.8 line 52 to col.9 line 28). 

As per Claim 19, wherein said step (c) includes the steps of: (1) applying a first function to a value in said log- 
in data to obtain a first result, and (2) comparing said first result obtained in said step (c)(1) to a first value 
stored in said log-in record (col.3 line 55 to line 57). 

As per Claim 20, wherein said step (f) includes the steps of: (4) applying a second function to said value in said 
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log-in data to obtain a second result; and (5) replacing said first value in said log-in record with said second 
result obtained in said step (d)(4) (col.3 line 55 to col.4 line 17). 

As per Claim 21, wherein said first function is a first hash function and said second function is a second hash 
function different than said first hash function (col.31ine 63 to col.4 line 18). 

As per Claim 22, wherein said step (d) includes the steps of: (3) applying a third function to said value in said 
log-in data to obtain a first credential; and (4) decrypting said first encrypted value in said log-in record to 

obtain a first decrypted value, wherein said step (d)(4) employs said first credential, wherein said authentication 
data includes said first decrypted value credential (col.4 line 5 to line 30). 

As per Claim 23, said step (f)(2) includes the steps of: (i) applying a fourth function to said value in said log-in 
record to obtain a second credential; and (ii) encrypting a quantity to obtain said second encrypted value, 
wherein said step (f)(2)(ii) employs said second credential (col. 4 line 41 to col.5 line 33). 

As per Claim 24, said third function is a third hash fimction and said fourth fimction is a fourth hash function 
different than said third hash function (col.3 line 63 to col.4 line 30). 

As per Claim 25, wherein said step (d) includes the steps of: (3) inputting said value in said log-in data to a first 
cr3q)tographic cipher to obtain a first decrj^tion key; and (4) decrypting said first encrypted value in said log-in 
record to obtain a first decrypted value, wherein said step (d)(4) employs said first decryption key, wherein said 
authentication data includes said first decrypted value (col. 4 line 41 to line 50). 
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As per Claim 26, wherein said step (f)(2) includes the steps of: (i) inputting said value in said log-in record to a 
second cryptographic cipher to obtain said second encryption key; (ii) encrypting a quantity to obtain said 
second encrypted value, wherein said step (f)(2)(ii) employs said second encryption key (col.5 line 7 to line 33). 

As per Claim 27, wherein said step (d) includes the steps of: (1) applying a first fimction to a value in said log- 
in data to obtain a first credential; and (2) decrypting said first encrypted value in said log-in record to obtain a 
first decrypted value, wherein said step (d)(2) employs said first credential, wherein said authentication data 
includes said first decrypted value credential (col.4 line 5 to line 30). 

As per Claim 28, wherein said step (f)(2) includes the steps of: (i) applying a second fiinction to said value in 
said log-in record to obtain a second credential; and (ii) encrypting a quantity to obtain said second encrypted 
value, wherein said step (f)(2)(ii) employs said second credential (col.4 line 41 to lcol.5 line 33). 

As per Claim 29, wherein said first fiinction is a first hash fiinction and said second fiinction is a second hash 
function different than said first hash fiinction (col.31ine 63 to col.4 line 18).. 

As per Claim 30, wherein said first function is a first cryptographic cipher and said second function is a second 
cryptographic cipher different than said first cryptographic cipher (col.31ine 63 to col.4 line 18). 

As per Claim 32, wherein said computer system maintains a log-in record, wherein said step (b)(2) includes the 
steps of (i) comparing said first result obtained in said step (b)(1) to a first value stored in said log-in record, 
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and wherein said step (e) includes the step of: (2) replacing said first value in said log-in record with said 
second result obtained in said step (d)(1) (col. 4 line 41 to col.5 line 65). 

As per Claim 33, wherein said first fiinction is a first hash fiinction and said second fiinction is a second hash 
fiinction different than said first hash fiinction (col.31ine 63 to col.4 line 18). 

As per Claim 34, wherein said step (b) includes the steps ofi (3) applying a third fiinction to said value in said 
log-in data to obtain a first credential; and (4) decrypting a third value in said log-in record to obtain a decrypted 
value, wherein said step (b)(4) employs said first credential, and wherein said step (e) includes the steps of: (3) 
applying a fourth fiinction to said value in said log-in record to obtain a second credential; (4) encrypting a 
quantity to obtain a fourth value, wherein said step (e)(4) employs said second credential; and (5) replacing said 
third value in said log-in record with said fourth value (col. 4 line 41 to col.5 line 65). 

As per Claim 35, wherein: said first function is a first hash fiinction and said second fiinction is a second hash 
function different than said first hash fiinction, and said third fiinction is a third hash fiinction and said fourth 
function is a fourth hash fiinction different than said third hash fiinction(col.3 line 63 to col.4 line 30). 

As per Claim 36, wherein said step (b) includes the steps of: (3) inputting said value in said log-in data into a 
first cryptographic cipher to obtain a first encryption key; and (4) decrypting a third value in said log-in record 
to obtain a decrj^ted value, wherein said step (b)(4) employs said first encryption key, and wherein said step (e) 
includes the steps ofi (3) inputting said value in said log-in data into a second cryptographic cipher to obtain a 
second encryption key; (4) encrj^ting a quantity to obtain a fourth value, wherein said step (e)(4) employs said 
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second encryption key; and (5) replacing said third value in said log-in record with said fourth value(col.4 line 
41tocol.51ine65). 

As per Claim 37, wherein said computer system maintains a log-in record, wherein said step (b)(2) includes the 
steps of: (i) decrypting a first value in said log-in record to obtain a decrypted value, wherein said step (b)(2)(i) 
employs said first result as a decryption key; and (ii) forwarding said decrypted value to a primary computer 
system, and wherein said step (d) includes the steps of: (2) encrypting a quantity to obtain a second value, 
wherein said step (e)(2) employs said second result obtained in said step (e)(1); and (3) replacing said first value 
in said log-in record with said second value (col.4 line 41 to col.5 line 65). 

As per Claim 38, wherein: said first fimction is a first hash fimction and said second function is a second hash 
function different than said first hash function, and said third function is a third hash function and said fourth 
function is a fourth hash fimction different than said third hash fimction (col.31ine 63 to col.4 line 18). 

As per Claim 39, wherein: said first function is a first cryptographic cipher and said second function is a second 
cr3q)tographic cipher different than said first cryptographic cipher, and said third fimction is a third 
cryptographic cipher and said fourth function is a fourth cryptographic cipher different than said third 
cryptographic cipher (col.31ine 63 to col.4 line 18). 

As per Claim 40, wherein said computer system includes a log-in record corresponding to said client, wherein 
said log-in record includes a first entry identifying said current security scheme, said computer implemented 
method fiirther including the step of: (f) replacing said first entry in said log-in record with a second entry 
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identifying said desired security scheme (col.3 line 33 to col.4 line 40). 

As per Claim 42, wherein said step (c) includes the steps of: (1) applying a first fiinction to a value in said log- 
in data to obtain a first result, and (2) comparing said first result obtained in said step (c)(1) to a first value 
stored in said log-in record, and wherein said step (f) includes the steps of: (4) applying a second function to 
said value in said log-in data to obtain a second resuk; and (5) replacing said first value in said log-in record 
with said second result obtained in said step (d)(4) (col.4 line 41 to col.5 line 65). 

As per Claim 43, wherein said first fUnction is a first hash function and said second fiinction is a second hash 
function different than said first hash fiinction (col.3 line 55 to col.4 line 17). 

As per Claim 44, wherein said step (d) includes the steps of: (3) applying a third fiinction to said value in said 
log-in data to obtain a first credential; and (4) decrypting said first encrypted value in said log-in record to 
obtain a first decr5q)ted value, wherein said step (d)(4) employs said first credential, wherein said authentication 
data includes said first decrypted value, and wherein said step (f)(2) includes the steps of: (i) applying a fourth 
fiinction to said value in said log-in record to obtain a second credential; and (ii) encrypting a quantity to obtain 
said second encrypted value, wherein said step (f)(2)(ii) employs said second credential (col.4 line 41 to col.5 
line 65). 

As per Claim 45, wherein said step (d) includes the steps ofi (3) inputting said value in said log-in data to a first 
cryptographic cipher to obtain a first decryption key; and (4) decrypting said first encrypted value in said log-in 
record to obtain a first decrypted value, wherein said step (d)(4) employs said first decryption key, wherein said 
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authentication data includes said first decrypted value, and wherein said step (f)(2) includes the steps of: (i) 
inputting said value in said log-in record to a second cryptographic cipher to obtain said second encryption key; 
(ii) encrypting a quantity to obtain said second encrypted value, wherein said step (f)(2)(ii) employs said second 
encryption key(col.4 line 41 to col.5 line 65). 

As per Claim 46, wherein said step (d) includes the steps of: (1) applying a first fiinction to a value in said log- 
in data to obtain a first credential; and (2) decrypting said first encrypted value in said log-in record to obtain a 
first decrypted value, wherein said step (d)(2) employs said first credential, wherein said authentication data 
includes said first decrypted value, and wherein said step (f)(2) includes the steps of: (i) applying a second 
function to said value in said log-in record to obtain a second credential; and (ii) encrypting a quantity to obtain 
said second encrypted value, wherein said step (f)(2)(ii) employs said second credential (col.4 line 41 to col.5 
line 65). 

As per Claim 47, wherein said first function is a first hash function and said second function is a second hash 
function different than said first hash function (col.31ine 63 to col.4 line 18). 

As per Claim 48, wherein said first function is a first cryptographic cipher and said second function is a second 
cr3q)tographic cipher different than said first cryptographic cipher (col.4 line 41 to col.5 line 65). 

As per Claim 50, wherein said computer system maintains a log-in record, wherein said step (b)(2) includes the 
steps of: (i) comparing said first result obtained in said step (b)(1) to a first value stored in said log-in record, 
and wherein said step (e) includes the step of: (2) replacing said first value in said log-in record with said 
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second result obtained in said step (e)(1) (col.4 line 41 to col.5 line 65). 

As per Claim 51, wherein said step (b) includes the steps of: (3) applying a third function to said value in said 
log-in data to obtain a first credential; and (4) decrypting a third value in said log-in record to obtain a decrypted 
value, wherein said step (b)(4) employs said first credential, and wherein said step (e) includes the steps of: (3) 
applying a fourth fiinction to said value in said log-in record to obtain a second credential; (4) encrypting a 
quantity to obtain a fourth value, wherein said step (e)(4) employs said second credential; and (5) replacing said 
third value in said log-in record with said fourth value (col.4 line 41 to col.5 line 65). 

As per Claim 52, wherein said first fiinction is a first hash function and said second function is a second hash 
function different than said first hash fiinction, and said third fiinction is a third hash fiinction and said fourth 
function is a fourth hash fiinction different than said third hash fiinction (col.31ine 63 to col.4 line 18). 

As per Claim 53, wherein said step (b) includes the steps of: (3) inputting said value in said log-in data into a 
first cryptographic cipher to obtain a first encryption key; and (4) decrypting a third value in said log-in record 
to obtain a decrypted value, wherein said step (b)(4) employs said first encryption key, wherein said step (e) 

includes the steps of: (3) inputting said value in said log-in data into a second cryptographic cipher to obtain a 
second encryption key; (4) encrypting a quantity to obtain a fourth value, wherein said step (e)(4) employs said 
second encryption key; and (5) replacing said third value in said log-in record with said fourth value (col.4 line 
41 to col.5 line 65). 

As per Claim 54, wherein said computer system maintains a log-in record, wherein said step (b)(2) includes the 
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steps of: (i) decrypting a first value in said log-in record to obtain a decrypted value, wherein said step (b)(2)(i) 
employs said first result as a decryption key; and (ii) forwarding said decrypted value to a primary computer 
system, and wherein said step (e) includes the steps of: (2) encrypting a quantity to obtain a second value, 
wherein said step (e)(2) employs said second result obtained in said step (e)(1); and (3) replacing said first value 
in said log-in record with said second value (col.4 line 41 to col.5 line 65). 

As per Claim 55, wherein said first function is a first hash function and said second function is a second hash 
function different than said first hash function, and said third function is a third hash function and said fourth 
function is a fourth hash function different than said third hash function (col.31ine 63 to col.4 line 18, and col.5 
line 35 to col.5 line 65). 

As per Claim 56, wherein said first function is a first cryptographic cipher and said second function is a second 
cryptographic cipher different than said first cryptographic cipher, and said third function is a third 
cryptographic cipher and said fourth function is a foiirth cryptographic cipher different than said third 
cryptographic cipher (col.31ine 63 to col.4 line 18, and col.5 line 35 to col.5 line 65). 

As per Claim 57, wherein said computer system includes a log-in record corresponding to said client, wherein 
said log-in record includes a first entry identifying said current security scheme, said method further including 
the step of: (f) replacing said first entry in said log-in record with a second entry identifying said desired 
security scheme. 



Conclusion 
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